Hi, I have a route based IPsec VPN to a customer, assume the traffic-selector is 1.2.3.4/32 to 5.6.7.8/32, the vpn is bound to st0.1, when the vpn comes up, a static route to 5.6.7.8/32 is automatically populated in the routing table. This is all good in most cases, but I have a scenario that the customer wants redundant vpn gateway on their side, essentially same traffic selector but different ike gateways, say this backup vpn is bound to st0.2, we now will have two static routes geneated with next-hop being different, I don't want Junos to loadbalance because st0.2 is backup only, how can I get around this?
↧